Submission by VeigaPunk · interactive prototype + design rationale · for the comma design challenge
openpilot is L2 and already self-aware about failure likelihood and actuator saturation. Today, drivers often learn about trouble at the alert — too late for calm intervention, and the alert itself is more annoying than useful. comma four is the headlining hardware: eyes stay on the road; the UI must work in peripheral vision on a modern non-Qt stack (flat solid fills still preferred for readability in cabin light).
Sound: soft tick only when confidence drops across a class boundary, or when any actuator enters the top 15% of limit. No looping chime in steady amber.
Screen-edge glow + trajectory ribbon share one continuous confidence scalar
c ∈ [0,1] (not three discrete LEDs). Classes are soft bands for copy/sound only:
c ≥ 0.72 → RELIABLE0.38 ≤ c < 0.72 → CONTINGENTc < 0.38 → UNRELIABLEColor interpolates green→amber→red in OKLab-ish HSL (easy on any modern UI toolkit). Peripheral edges fire motion-sensitive receptors without covering the road camera plate.
Three always-visible bars: steer torque, brake pressure, longitudinal accel. Fill = fraction of car-specific limit currently commanded. Dashed line = soft limit (start of nonlinear tire / ABS / ESC region). Color flips amber at 70%, red at 90%.
This is the missing “pre-alert” channel: the driver sees torque climbing on a windy ramp before the classic “steering temporarily unavailable” bark.
| Event | One soft rising tick (120ms) on class down-transition only. |
|---|---|
| Actuator | Short double tick when any bar first crosses 85% within a 2s window. |
| Imminent | c < 0.25 or multi-bar critical → one double-tick + toast; no loop until recovery then re-arm. |
| Non-goals | No continuous hum, no speech, no music, no per-frame beeps. |
| UI input | Suggested source |
|---|---|
confidence c | Blend of model uncertainty, desire lane visibility, lead existence prob, road-edge, and historical disengage prior for scene class. |
| steer usage | |steer_torque| / car_torque_max (already known per fingerprint). |
| brake / accel | Long control output vs car accel/brake caps; include regen envelope if present. |
| engaged ring | Existing engaged state + soft hands-on / wheel torque presence. |
Existing entries solve pieces well (dials, Figma systems, narrative writeups). Horizon Halo unifies the brief’s two requirements — confidence spectrum and limit proximity — into one implementable HUD for comma four with an interactive falsifiable demo, explicit signal mapping, and a sound policy that reduces annoyance (the brief’s own complaint about today’s alerts).